Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d480b6d-25fc-4f37-b125-f45ce236f4ea.roa
File: 1d480b6d-25fc-4f37-b125-f45ce236f4ea.roa (raw, json)
Hash identifier: SE8xb7He3zoNVAghCBj9z0T01vmA0BWayMRnEx42coY=
Subject key identifier: 9A:55:40:BE:2A:03:6F:60:3C:A9:5B:A3:9E:4E:1A:72:F7:23:58:E7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6ED212EDF4DFEAAE56CF0AE3A100FDE4C3B89866
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d480b6d-25fc-4f37-b125-f45ce236f4ea.roa
Signing time: Fri 07 Aug 2026 05:40:23 +0000
ROA not before: Fri 07 Aug 2026 05:40:23 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01d:800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d2:12:ed:f4:df:ea:ae:56:cf:0a:e3:a1:00:fd:e4:c3:b8:98:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:40:23 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=06f8205063c641b9f2075eab9a413994a79df86e15d623be86de7c8204e0edd0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:89:1e:56:8f:79:6c:e4:9b:79:73:2d:12:
3c:eb:fe:29:8d:dc:29:3f:40:e4:00:14:c1:96:2c:
cf:d3:6d:aa:c7:80:6e:27:36:81:d8:46:75:f1:85:
c6:3b:dc:1b:2d:15:94:7c:ef:63:0f:58:b6:40:a8:
51:a6:e4:46:54:28:72:46:5d:14:fa:ad:86:7d:cf:
3c:24:9d:07:07:50:74:f1:27:9e:45:4e:ad:76:ca:
b3:07:eb:81:cf:fa:1e:a8:85:fc:13:c9:d2:61:82:
d0:f8:1c:f8:5f:07:64:43:ee:3b:42:93:a9:e7:75:
f1:1f:98:5d:fa:8b:e0:d7:32:69:ea:f1:98:96:0c:
fb:1c:76:51:36:7a:46:5b:3d:53:28:13:77:45:9b:
65:7c:85:4c:58:4b:a1:dd:48:55:03:cd:5d:b7:fa:
9e:43:de:7e:24:eb:af:66:dd:9a:74:73:98:7a:f3:
16:ec:6a:6b:3f:a0:33:59:67:db:50:7d:a1:f8:34:
8e:86:cc:ff:41:b1:92:9f:57:a3:95:2f:be:57:74:
46:98:e3:b4:17:d3:14:da:fa:7f:8e:2b:76:62:79:
31:64:12:25:03:31:b9:97:35:ec:ba:d7:ab:b0:09:
f9:d3:8b:35:da:00:7f:1f:11:43:b2:66:f0:3a:df:
d8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:55:40:BE:2A:03:6F:60:3C:A9:5B:A3:9E:4E:1A:72:F7:23:58:E7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d480b6d-25fc-4f37-b125-f45ce236f4ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01d:800::/37
Signature Algorithm: sha256WithRSAEncryption
29:5b:c6:60:02:54:e6:aa:41:5f:16:e6:c9:b7:23:a9:a1:3d:
95:2b:3b:43:61:2c:79:59:4b:8b:bc:55:31:ad:4b:cd:9e:b4:
02:c6:ac:70:6a:a3:d1:13:c0:23:c5:25:cd:02:bb:f6:54:39:
b4:ce:6c:7f:be:2b:2d:46:9a:e8:20:98:bc:b9:76:fd:69:a7:
9e:f1:f3:c3:76:9f:26:33:bc:0c:66:f0:a8:6b:0a:cf:66:98:
23:e7:e2:74:bd:04:c4:f7:ea:65:ea:2a:c5:17:bb:b9:0b:45:
e5:ee:1c:3a:76:86:31:46:81:50:d3:c1:92:21:8f:a8:9e:07:
c5:59:97:b7:6e:c0:0e:41:4a:fc:79:49:00:5b:f3:6a:8c:53:
4b:ac:0a:3c:e4:78:80:87:80:24:57:d3:af:2e:67:ad:ce:ce:
86:04:aa:04:cb:a6:65:ab:1e:b3:d6:00:28:76:27:d6:54:47:
1f:60:af:b0:02:31:82:b4:f1:b3:b8:ce:18:a3:b7:3f:8f:dd:
c9:2a:41:c6:aa:74:47:bb:77:02:d5:58:62:28:e3:cc:32:b9:
9d:c1:b3:6b:db:93:36:e1:37:6e:88:fd:87:48:b4:83:df:e9:
f9:27:aa:ec:db:91:48:78:a9:3c:46:11:f0:b3:80:45:63:e7:
49:6b:9c:63
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUbtIS7fTf6q5WzwrjoQD95MO4mGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTQwMjNaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDA2ZjgyMDUwNjNjNjQxYjlmMjA3NWVhYjlhNDEzOTk0YTc5ZGY4NmUxNWQ2
MjNiZTg2ZGU3YzgyMDRlMGVkZDAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALSTiR5Wj3ls5Jt5cy0SPOv+KY3cKT9A5AAUwZYsz9NtqseAbic2gdhGdfGF
xjvcGy0VlHzvYw9YtkCoUabkRlQockZdFPqthn3PPCSdBwdQdPEnnkVOrXbKswfr
gc/6HqiF/BPJ0mGC0Pgc+F8HZEPuO0KTqed18R+YXfqL4NcyaerxmJYM+xx2UTZ6
Rls9UygTd0WbZXyFTFhLod1IVQPNXbf6nkPefiTrr2bdmnRzmHrzFuxqaz+gM1ln
21B9ofg0jobM/0Gxkp9Xo5Uvvld0RpjjtBfTFNr6f44rdmJ5MWQSJQMxuZc17LrX
q7AJ+dOLNdoAfx8RQ7Jm8Drf2MMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSaVUC+
KgNvYDypW6OeThpy9yNY5zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MWQ0ODBiNmQtMjVmYy00ZjM3LWIxMjUtZjQ1Y2UyMzZmNGVhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAyoF0B0I
MA0GCSqGSIb3DQEBCwUAA4IBAQApW8ZgAlTmqkFfFubJtyOpoT2VKztDYSx5WUuL
vFUxrUvNnrQCxqxwaqPRE8AjxSXNArv2VDm0zmx/vistRproIJi8uXb9aaee8fPD
dp8mM7wMZvCoawrPZpgj5+J0vQTE9+pl6irFF7u5C0Xl7hw6doYxRoFQ08GSIY+o
ngfFWZe3bsAOQUr8eUkAW/NqjFNLrAo85HiAh4AkV9OvLmetzs6GBKoEy6Zlqx6z
1gAodifWVEcfYK+wAjGCtPGzuM4Yo7c/j93JKkHGqnRHu3cC1VhiKOPMMrmdwbNr
25M24TduiP2HSLSD3+n5J6rs25FIeKk8RhHws4BFY+dJa5xj
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:42 2026 by rpki-client